Industry name is only the first layer of screening
Names such as software, e-commerce and consulting can help locate customers, but they cannot complete a compliance assessment. A software seller may sell ordinary office tools, or may in fact provide investment trading or gambling services; a cross-border trader may deal in entirely different goods, destinations and counterparties. Institutions should understand the specific sales content, customer base, performance methods and refund mechanisms before deciding whether they have the capacity to identify the risks.
In its customer due diligence guidance, AUSTRAC of Australia emphasizes that verification is not merely collecting identity documents; it also requires understanding the customer and the business relationship and continuously updating information. What is cited here is an explanation of Australian regulatory requirements; other markets need to check their locally applicable rules, and this guidance cannot be treated directly as global law.
A merchant being lawful in its place of incorporation does not mean it is lawful in every market
Assume an offshore online gambling merchant holds a licence in its place of incorporation and wishes to accept UK customers through a stablecoin collection service. The UK Gambling Commission makes clear that providing remote gambling services to consumers in Great Britain requires its licence, even if the operator is established offshore. This example shows that payment teams cannot look only at where a merchant is incorporated, but must also look at whom it provides services to; nor can they ignore the underlying industry restrictions simply because the payment currency changes.
Permitted by law, permitted by licence, and acceptable to the channel are three different gates
A bank or settlement partner may refuse a lawful industry based on its own risk appetite, which is not the same thing as a legal prohibition. Conversely, a channel being willing to take on business is not proof that the operation is lawful. The true industry, customer base and transaction path should be explained to the counterparty, and written approval should be tied to the specific contracting entity and product, rather than relying on a salesperson saying orally that "we have handled similar customers".
In practice, three lists can be established: permitted, enhanced review and refused, but the reasons for classification should be specific. An industry requiring additional materials, transaction limits or manual review does not mean it must be permanently excluded; where the purpose of funds cannot be explained, performance cannot be verified, or disclosure of the true business is refused, those gaps should be addressed first.
Treat a new industry as a product change
Before the client acquisition team introduces a new industry, it is recommended that the business, compliance, risk management and channel heads jointly confirm whether to onboard it, and record the required capabilities and limitations. After launch, observe deviations against the expected average transaction value, customer source regions and refund rate. The above classification and approval are management methods that may be adopted; they are not a standard format uniformly prescribed by any jurisdiction. The key point is that the institution can explain why it accepts the merchant and how it will handle anomalies when they arise.
Recommended actions
- Obtain the merchant's actual website, product catalogue, main sales locations and samples of performance evidence.
- For specially regulated industries, verify the licensed entity, its valid status and the regions in which it may provide services.
- Apply to banks and payment channels for written admission confirmation consistent with the actual business.
- Establish re-review trigger points for new industries and merchant transformations.
Information note: This article provides general information and does not replace legal advice based on specific facts.
References
- Know your customer: getting customer due diligence right — AUSTRAC, Australia
- Remote sector guidance — UK Gambling Commission
